odd pdf hash
#1
I ran through a pdf through pdf2john (via https://www.onlinehashcrack.com/tools-pd...ractor.php ) and got this


$pdf$4*4*128*-1852*1*36*45364233363931362d343430352d343731302d424341322d384544433342383134334546*32*e092972efafad5802a75bc100249f6a800000000000000000000000000000000*32*09dbdfcceb36685843aa57b70b0cd45f63e5cc9edd24e82293276edf8b03adfb

Only it doesn't match any of the examples from https://hashcat.net/wiki/doku.php?id=example_hashes (Its too short for one thing)

Is it an issue with pdf2john ? (I tried to get the latest github release, and they only have a pdf2john.pl not pdf2john.py mentioned so i used the web version)

I ran hashcat with all the pdf -m modes, and either got Token length exception or Separator unmatched
Reply
#2
I don't know if there are slight differences in john's and hashcat's format but you can try with this script: https://github.com/stricture/hashstack-s...hashcat.py
Reply